categories
Access Control
Browse Pomerium articles in the Access Control category.
Topic archive
Resources Categorized: Access Control
Data-Layer Proxy vs Context-Aware Proxy: Which Do You Need?
Two proxy architectures secure AI agent access, and they solve different problems. How data-layer and context-aware proxies differ, and when you need each.
.png.Y_SOL6mu.webp)
Top Ingress NGINX Controller Migration Pain Points
Summary of the top pain points we've heard from customers performing ingress-nginx migrations and how Pomerium can help.
Privilege Access Is the Past. Per Request Authorization Is the Future.
For twenty years, cybersecurity has organized itself around a single idea:
AI Is Your Biggest Security Risk
IBM’s Cost of a Data Breach Report 2025 delivers a surprising headline: for the first time in five years, the global average cost of a data breach has declined, dropping to $4.44M . The reason? Faster detection and containment, driven largely by security automation and AI.
.png.C3SYIPl6.webp)
Why Kubernetes Ingress Needs an Identity Layer
Kubernetes ingress controllers are excellent at one thing: moving encrypted traffic to the right service. But encryption alone does not equal security.
Turning SANS Critical AI Security Guidelines Into Enforceable Agentic Controls with Pomerium
Learn how to turn SANS Critical AI Security Guidelines into enforceable controls for access, monitoring, and governance with Pomerium.
Agentic Access Management for Model Context Protocol (MCP) Workflows
We’re no longer designing systems where humans are the sole decision-makers. Agentic AI changes the rules. LLMs don’t just respond to prompts anymore, they make decisions autonomously within your systems.
How Pomerium Makes Access Audit Ready and Turns It Into a Source of Truth
Ask most teams to show who accessed a sensitive system—and why—and you’ll get a long pause.
How Pomerium Secures Access for Human, Service, and Agent Identities
Legacy tools were designed for single perimeters: users in offices, apps in one environment, and static roles assigned to each.
How Pomerium Enforces Real-Time, Context-Based Access
For security engineers, compliance owners, and platform teams who need smarter policies for better security posture.
How Pomerium Secures SSH Access with Zero Trust
SSH access is often treated as a static utility, but in modern environments, implicit trust just won’t cut it. This article explores how Pomerium brings Zero Trust principles to SSH — using short-lived certificates, OAuth authentication, continuous policy enforcement, and session recording — without agents or VPNs.
5 Reasons Chief Information and Technology Officers Are Rewriting Access Strategies for AI in 2025
Autonomous agents are here, and they’re reshaping enterprise systems. Agentic access is changing the rules — and legacy models aren’t ready for what’s coming next.
Context-Based Access Control and Zero Trust: Key Insights from the CSA White Paper
The Cloud Security Alliance (CSA) recently released a white paper on Context-Based Access Control (CBAC) and its role in advancing Zero Trust security models. The paper underscores the necessity of shifting from static, trust-based access control to real-time, adaptive authentication that evaluates risk dynamically, and Pomerium was highlighted as a key player in the CBAC space.
.jpg.DQ8OHx21.webp)
12 Crucial Mobile Device Management (MDM) Features - 2025
When choosing the right Mobile Device Management (MDM) solution for your organization, focusing on essential features is key to meeting both security and operational needs. Here’s a breakdown of the top 12 essential MDM features to help you compare and select the right tool for your business. We have also included a ready-to-use questionnaire that you can utilize to evaluate the features of your shortlisted MDM solutions.
40 Unique IAM Interview Questions and Answers | 2025 Edition
Are you a founder, manager, or part of an HR team looking to hire for a position in an identity and access management (IAM) company? A fundamental understanding of IAM is crucial for success, especially if the role is technical, such as an analyst, engineer, or tech support. In this article, we've compiled 40 Identity and Access Management interview questions—ranging from basic to advanced—along with ideal answers to help you evaluate candidates effectively. Additionally, we’ve included operational and behavioral IAM interview questions to assess the candidate's overall personality and fit for the role.
20 Top Remote Workforce Solutions for Businesses- 2025
If your business has remote employees or is planning to hire some, you have reached the right article. From team collaboration to project management, businesses need a variety of tools to keep their distributed teams productive and engaged. In this article, we have handpicked 20 top remote workforce solutions that can streamline operations for businesses of all sizes. Let’s explore.
Announcing FleetDM integration for adding device context to access control
Announcing our FleetDM integration to bring mobile device management into Pomerium's zero trust access control
10 Best Open Source Mobile Device Management (MDM) Solutions
Managing mobile devices efficiently is crucial for organizations of all sizes. Mobile Device Management (MDM) is a system that enables organizations to securely manage, monitor, and control devices within their network. Despite the term "mobile" in its name, MDM isn’t limited to just cell phones—it covers a wide range of devices including smartphones, tablets, laptops, and even IoT devices. Choosing the right MDM solution involves considering various factors, so to help with this decision, we’ve shortlisted the 10 best open-source mobile device management solutions.
B2B VPN: Meaning, Examples, Alternatives
B2B VPN meaning: A B2B VPN (Business-to-Business Virtual Private Network) is a secure connection established between multiple business entities over the internet. Here are it's pros, cons, and alternatives
Palo Alto Clientless VPN: Pros - Cons, Alternatives
Let's explore how Palo Alto’s Clientless VPN works, its pros and cons, and whether it meets your organization's remote access needs. We'll also delve into an alternative solution that might better align with your specific requirements.
Introducing Pomerium Zero
Pomerium Zero is a NextGen Access Platform for building secure clientless connections to web applications and services.
4 Trends Shaping the Future of Access Control
Access control is no longer an afterthought of the development process – it's the cornerstone of a secure environment. The rise of remote work has fundamentally changed how we access data and resources. Organizations now face the challenge of securing access for a distributed workforce while also fending off increasingly sophisticated cyberattacks. Weak access controls leave businesses vulnerable to data breaches and unauthorized access.
Elevating Remote Access: Understanding NextGen VPN Flaws
Virtual Private Networks (VPNs) have been around for decades, providing secure connections between remote locations and enabling remote workers to access company resources. NextGen VPNs, such as StrongDM , Tailscale , and Twingate offer streamlined experiences and advanced features that organizations not only use but also adore.
IAM Trends and Future Outlook
Earlier this year, CISA (Cybersecurity and Infrastructure Security Agency) released their Enduring Security Framework Guidance on IAM (Identity Access Management). While we highly recommend practitioners read the document itself for its best practices and list of immediate actions, we want to discuss some of CISA’s best practices as well as their current and future trends.
Best VPN Alternatives
VPNs are insecure and slow. Here are the top VPN alternatives.
5 Lessons Learned Connecting Every IdP to OIDC
Integrating OIDC with various identity providers (IdPs) is notoriously complex and time-consuming for developers. We share five lessons learned while simplifying the process, including the challenges of standardizing tokens, handling directory sync at scale, and managing diverse IdP quirks.
Tailscale & Pomerium: Better Together
Tailscale is an encrypted network mesh that allows you to connect devices across different networks and make them accessible from anywhere in the world. Many of Tailscale’s customers use them to simplify networking and replace the traditional VPN.
What Is SASE? — A Buyer’s Guide
Update: Gartner is now supporting the service chained products they once warned about.
Device Management: Essential for Workplace Security and Efficiency
The digital workplace is using more devices in pursuit of workflow efficiency. This presents challenges for company networks, as every device costs the organization in terms of security risk and increased management burden.
The Perimeter Problem: Why Traditional Network Security Fails
Traditional network perimeter defenses are failing, called the Perimeter Problem. We discuss the pitfalls of tunneling tools, and why going perimeter-less is the best option.
A Case Against Layer 4 Security Tools
We often talk about how Layer 4 tooling such as VPNs are bad for security , so this post is going to dig into why. If you just want the conclusion, it's simple: Layer 4 tooling is fundamentally blind to its own traffic and Layer 7 tooling is not, which leads to different results for auditing, logging, and continuous verification.
Announcing Pomerium v0.21
While we’ve been cooking up something big , we have some nice entrees to whet your appetite. Pomerium v0.21 is packed with performance improvements, bug fixes, new features, and feature updates, including:
VPNs Are Killing Productivity
VPNs have long been the standard for secure remote access, but they come with significant drawbacks like poor security, performance issues, and increased IT workloads. As remote work continues to evolve, organizations must rethink their approach to access control.
Benefits of Zero Trust Architecture as Defined by NIST
NIST has released a draft of SP 1800-35 , Implementing a Zero Trust Architecture. The lengthy documents lay out their definition of Zero Trust Architecture (ZTA) , the benefits, why it’s important, a few examples of how an organization can implement them, expected results associated with their example builds, and a mapping of ZTA security characteristics to current cybersecurity standards and compliance.
Your Portal is Showing
Something’s happening in the realm of cybersecurity: breaches and data leaks are happening everywhere . Here’s a shortlist of the last few months:
Announcing Pomerium v0.20
New year, new big release! We’re thrilled to announce Pomerium v0.20, including:
Proxy vs Reverse Proxy
What's a forward proxy vs reverse proxy? We explore what proxies are and how they can be used to secure access.
Authn vs. Authz — Authentication vs. Authorization
When it comes to access control, authentication (AuthN) and authorization (AuthZ) fulfill different functions as methods to control access. In the modern world, those resources can be sensitive assets, applications, programs, devices, or more.
